Description
IIS Backup created during the installation occurs before some IIS configurations are done.
After restoring to this backup, the
Server Certificate is missing. Also, the following web services are not set to Require a secure channel (SSL) or to Require 128-bit encryption.
- landesk/managementsuite/core/ssl
- landesk/managementsuite/core/ssl/remotecontrol
- landesk/managementsuite/core/ssl/information
Cause
The IIS backup is done before PostSetupConfig.exe is run. PostSetupConfig.exe is where the the certificate is added to IIS as well as where changes are made to the following web services.
- landesk/managementsuite/core/ssl
- landesk/managementsuite/core/ssl/remotecontrol
- landesk/managementsuite/core/ssl/information
The specific section in PostSetupConfig.xml is this:
<command CustomActionName="Cert Install">
<executorPath>C:\Program Files\LANDesk\ManagementSuite\SecureWebSiteInstall.exe</executorPath>
<CommandLine>"ld88_JAN1107" landesk/managementsuite/core/ssl landesk/managementsuite/core/ssl/remotecontrol</xmp><xmp>landesk/managementsuite/core/ssl/information</CommandLine>
</command>
Resolution
Submitted CR00009741. However, as this is an installation issue, it cannot be fixed until the next installer for the next version.
Workaround
For now, when installing LDMS 8.8, create a manual backup of the IIS configuration after the initial installation.
If the IIS backup was restored, do the following:
- First look for a more recent backup. IIS does perform some automatic backups. The automatic backups show the backup date. The first automatic backup after the installation may work.
- If an automatic backup exists, restore to that backup.
If the backup was restored, and no automatic backup is available, run the following command to add the missing IIS configuration:
C:\Program Files\LANDesk\ManagementSuite\SecureWebSiteInstall.exe "CertName" landesk/managementsuite/core/ssl landesk/managementsuite/core/ssl/remotecontrol landesk/managementsuite/core/ssl/information
Where CertName is the name of the LANDesk Certificate. For example if the certificate name is d88_JAN1107, the command would be as follows.
C:\Program Files\LANDesk\ManagementSuite\SecureWebSiteInstall.exe "ld88_JAN1107" landesk/managementsuite/core/ssl landesk/managementsuite/core/ssl/remotecontrol landesk/managementsuite/core/ssl/information
